gwcx18x.life

The domain gwcx18x.life was observed on July 12, 2026 and is classified as a high‑risk generic_phishing campaign. The site returns an HTTP 301 redirect and presents the page title “GET‑X”. Risk assessment places the domain in an active state, indicating ongoing malicious activity.

Infrastructure analysis shows the domain was registered on February 21, 2026 through a registrar identified as URL Solutions, Inc. Authoritative name servers are ns1.pananames.com through ns4.pananames.com. DNS resolution points to IP address 186.2.165.69, which is geolocated to the United Arab Emirates and attributed to Iqweb LLC. The TLS certificate is identified as type R12 and enforces HTTP Strict Transport Security.

Reputation signals include a detection by 2 out of 95 security vendors on VirusTotal, placement on a single security blocklist, and a trust score of 0 out of 100 from a known heuristic engine. The domain is also listed as blocked by PhishDestroy. These indicators collectively confirm a malicious reputation despite the low vendor count.

Current evidence does not reveal the full content of the landing page beyond the title, and the specific phishing payload or credential collection mechanism remains unknown. Defenders should therefore treat any traffic to gwcx18x.life as hostile. Recommended mitigations include adding the domain to blocklists at network perimeter, configuring DNS sinks for the authoritative name servers, and monitoring for connections to the associated IP address. Continuous re‑evaluation is advised as additional detections may emerge.